On Tue, Aug 16, 2016 at 05:01:55PM +0200, Jakub Hrozek wrote:
> To test, run:
>     rpm -qf /var/lib/sss/secrets/
> the directory was unowned before and should be owned by sssd-common now.

CI: http://sssd-ci.duckdns.org/logs/job/51/74/summary.html

By the way Fabiano asked on IRC why I owned the directory as root.root
and not sssd.sssd. The reasons are:
    - this is compatible with how the SECDB directory is created in
      Makefile.am
    - we never tested (AFAIK) the secrets responder as non-root
    - the secrets should be accessible to root mostly anyway
_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org
https://lists.fedorahosted.org/admin/lists/sssd-devel@lists.fedorahosted.org

Reply via email to